e-Boks Communication on Progress ESG Report 2024

2024 ESG report UN Global Compact Communication on Progress

A letter from our CEO In 2024, more than 24.1 million digital postbox accounts had been created through e-Boks. These digital postboxes enable citizens across the world to access, sign, and store critical documents from more than 30,000 public and private institutions – including banks, pension funds, insurance and utilities.

shape the future of secure postal communication in a digital first world. In 2024, we published a joint Whitepaper – ”Digital Postbox - Redefining Communication Solutions for Modern Postal Challenges”. The Whitepaper looks at how postal services must become fit for the digital age and regain and reinforce their role as national infrastructure providers, indispensable as secure, single access, omWith our roots in Denmark, one of the world´s most nichannel platforms for digital communication that digital democracies, e-Boks has spent the past 24 protect citizens, institutions, and businesses in the years helping build better digital societies. Today, digital era. our services support secure communication and digital infrastructure in countries such as Denmark, As our societal role expands, so does our responGreenland, Norway, Ireland and beyond. sibility to ensure that our governance structures, ESG practices, and strategic priorities reflect the Our successful expansion continuously draws expectations of users, partners and regulators from being at the frontline of Denmark’s digitization across markets. We remain committed to the Ten journey where e-Boks remains among the most Principles of the UN Global Compact, and in 2024, trusted and used secure digital postboxes, cove- we chose to raise the bar by aligning our reporring 90 per cent of the Danish population, or 5.3 ting with the EU Voluntary Sustainability Reporting million users.

Standard for SMEs (VSME). By adopting this standard, we are not only increasing transparency but Citizens’ access to secure digital postboxes are also strengthening our internal policies and setting foundational for securing their legal rights and more ambitious goals for our ESG performance. identities and for the efficient and trusted communication between public authorities, citizens and Assessing our ESG risks and opportunities from businesses. As we continue to expand across a double-materiality perspective, a strategic focus sectors and nations, our growth is underpinned for e-Boks remains to ensure regulatory, custoby key principles of social inclusion, accessibility, mer and end-user trust to our secure digital platsecurity, and safety of data. That is how we con- form and services in an evolving threat landscape. tribute to Sustainable Development Goal 16: Pe- Growing concerns among governments and priace, Justice and Strong Institutions. At the same vate enterprises about the need for strengthening time, our growth is closely linked to the transition cyber security and data privacy measures has towards paper-free distribution of documents – re- meant that our know-how and solutions are more ducing environmental impact and promoting more sought after than ever. We welcome and support sustainable communication practices. In doing so, EU efforts of shared standard setting for a safer we also actively support SDG 13: Climate Action digital space for all EU citizens. and 12 Sustainable Consumption and Production.

Today, as a consultative committee member of ”Shared digital security and data the Universal Postal Union — the UN’s speciali- privacy standards are our best prozed agency for strengthening global postal sy- tection in these difficult geopolitical stems — e-Boks contributes digital expertise to

times.”

2

From 2026, all EU countries must offer a digital identity wallet, enabling citizens and businesses to identify themselves securely and share credentials across borders. At e-Boks, we fully support this important step toward a more connected and digital Europe. With our long-standing role as a trusted platform for secure communication, e-Boks is now expanding into the digital wallet space. We’re building on our trusted foundation to help users verify their identity and manage digital credentials contributing to more secure and inclusive digital societies. Our new e-Wallet, developed in collaboration with award-winning startup dewa – founded by graduate students from Technical University of Denmark and Technical University of Munich –

allows users to store and share verified IDs and documents with full control over their own data.

It’s a key milestone in our ambition to make digital identity seamless, secure, and privacy-first.

I would like to end by thanking our partners and our users for their continued trust and collaboration. I would also like to thank my e-Boks colleagues for their dedication and commitment to our shared cause of creating better digital societies.

What makes e-Boks truly exceptional is the people who stand behind it.

Ulrik Falkner Thagesen Group CEO e-Boks

3

Content 6-7

About e-Boks

8-9

Our Business Model

10-11

How We Create Value for Society

12-13

Our Approach to ESG

14-17

Double Materiality and Stakeholder Engagement

18-19

ESG Governance Model

20-22

Our Environmental Responsibility

23-25

Case Study

26-32

Our Social Responsibility

33-37

Our Governance Responsibility

38-41

ESG Dashboard

42-44

Sources and Appendices

4

Introduction As a secure digital platform for communication, document delivery and storage of important documents, e-Boks delivers an important part of the societal infrastructure that makes modern society function and thrive. e-Boks has been part of the UN Global Compact (UNGC) since 2018, and the 2024 sustainability report is the 7th time we are reporting on progress against the UNGC Ten Principles and the Sustainable Development Goals. Since 2021, we have reported in alignment with the Carbon Disclosure Project (CDP) and in 2023, we set a baseline for our CO2 emissions in Scope 1, 2 and 3. With this foundational work, we have signed up to the Science-Based Targets initiative (SBTi) in 2024, submitting our CO2 reduction targets for Scope 1 and 2.

In our 2024 report, we have raised our ambitions by adding an additional reporting layer. We now report in accordance with the EU’s Voluntary standard for SMEs – VSME. This approach provides our customers and suppliers with access to key ESG metrics aligned with the EU’s internationally comparable indicators.

5

About e-Boks In 2001, e-Boks was launched to facilitate a secure and more effective way for companies to communicate with their customers and public authorities with citizens. Since then, e-Boks has played a pivotal role in digitalizing the infrastructure in Denmark and across the Nordics and beyond.

digital public services and is no. 1 when it comes to user-driven digital services. Today, 90% of all Danish citizens, 5.3 million Danes, use the secure digital postbox provided by e-Boks, accessed with their personal secure digital ID.

e-Boks Group is an independent public limited Today, e-Boks is a trusted provider of secure di- company co-owned by Nets and PostNord, progital infrastructure, offering digital postboxes and viding national digital post solutions to the governdocument services, while also expanding into ments of Denmark, Greenland, Norway, and value-adding features such as payments, digital Ireland. e-Boks operates across several B2B marconsent, and e-wallet functionality. e-Boks plays kets, including banking, insurance, pension, and a critical role in the digital infrastructure of modern telecommunications sectors, partnering with a society. We offer companies and public authorities wide range of companies to digitalize and streaman effective, secure, and user-friendly platform for line their communication processes. e-Boks has digital communication. As an official Danish “vie- activities in 7 countries. wing client” for digital post from public authorities, e-Boks enables citizens to receive, store, and In 2023, e-Boks joined the Universal Postal Union manage important and private messages and Consultative Committee. This partnership underdocuments from both public institutions such as scores our commitment to the sustainable digititax authorities, health services, and municipalities, sation of global postal services. By leveraging our and private companies including banks, insurance expertise in secure, encrypted digital platforms, firms, and utilities. we aim to enhance the efficient and eco-friendly distribution of digital post worldwide.

1 According to the OECD1 , Denmark remains among the best countries in the world to provide

Vision and mission

It is e-Boks’ vision to create better digital societies by: Reducing the environmental footprint of our public and private partners and their users

Protecting and safe-guarding citizen’s rights

1

6

See source: Denmark remains among the best countries in the world to provide digital public services

2024 in numbers

30,000 public and private institutions using e-Boks

90% of the Danish population using e-Boks

201 million DKK in net sales

24.1 million user accounts globally

100% GDPR and eIDAS compliant

7 countries using e-Boks

582 million documents sent

7

8

Our Business Model Key Resources

Core Activities

Financial Capital

Secure Postbox

We finance our investments through cash flow from our operations, and through our public-private ownership structure of PostNord A/S and Nets Denmark A/S

Digital Assets

We invest in digital solutions and applications, which can be used together with relevant systems and platforms across geographies and enterprises to scale up the secure and efficient communication between public authorities, citizens and businesses

Provides end-users with a lifelong personal and secure postbox for important and sensitive information from public authorities and private businesses. Secure identification of end-users is based on national eIDs

Secure Distribution

Guarantees a safe, digital distribution channel for sending sensitive and confidential personal data

Secure Dialogue

Provides sender with the option to establish confidential, reliable, and secure two-way communication with end-user

Portal Natural Resources

We rely on external data centres to power our business. Data centres consume vast amounts of energy, and as an important digital player, we are committed to sourcing 100% carbon neutral data by 2030

Human Resources

The e-Boks portal solution for corporate online systems provides an integrated platform for digitizing costly and time-consuming manual processes into companies’ own digital universes. It supports the digital signing of documents, sending notifications, and the secure dialogue between sender and end-user

Digital Signing

Offers sender and recipients a convenient, reliable and secure way of signing documents (agreements, contracts, offers) digitally from both PC, tablets and mobile phones, including notification service, follow-up service, and archiving options

We rely on a highly skilled workforce to operate our business, and we work to secure a pipeline of diverse talent from leading educational institutions

Payment

Security Culture

e-Boks Plus

We rely on a culture of security and integrity that always puts citizens’ interests first – their right to privacy, confidentiality and secure transaction of their personal data

Provides recipients a convenient and secure way of paying invoices. Processes the invoices in collaboration with existing payment service providers (PSP)

e-Boks Plus is a self-service universe that is displayed in a separate section in the e-Boks app. Here e-Boks’ mobile app users in Denmark, Sweden and Norway can access value-added services provided by e-Boks and third parties

e-Boks KYC Stakeholder Engagement

We rely on constructive collaboration with public and private partners to enable e-Boks to strengthen people’s legal rights, protect their fundamental freedoms, secure their legal identities and enable their secure and transparent access to public and private institutions. This is our commitment to SDG 16

e-Boks has joined forces with MEO to solve the challenge of ineffective KYC processes. The platform is built to ensure the compliance of anti-money laundering and GDPR regulation. With the KYC solution companies can request the necessary identification in e-Boks, and the customer can upload documents securely in the same place

Digital Identity Wallet in 2025

With the European Union mandating all EU countries to provide a digital ID wallet by 2026, e-Boks now offers a secure European digital identity wallet developed by award-winning Danish start-up dewa. The digital e-Wallet makes it easy and secure to identify oneself, sign documents, and store personal credentials

9

How We Create Value for Society

Commercial partnerships

Resources •

24 years of experience as a provider of effective and user-friendly digital

Controls & Verification

infrastructures •

Insights from public-private partnerships in 7 countries

•

Co-creation with users

•

30,000 public and private institutions using e-Boks

•

Maintenance

Creating better digital societies

Data Centre providers committed to becoming carbon neutral by 2030

•

Financial resources

•

Diverse talent

Innovation and product development Compliance

IT security

Service delivery and platform management

10

Reducing CO2e emissions • 582 million documents sent through the e-Boks platform • We strive to source 100% carbon neutral data by 2030

We are committed to SDG 12 Through helping digitalize countries and companies, we aim to contribute to reducing the material footprint of

Protecting and safeguarding citizen’s rights

paper and water per capita and per

• 24.1 million user accounts with

GDP.

access to secure digital post • 100% GDPR and eIDAS compliant • 100% delivery guarantee of secure digital documents

Diverse talent amongst our employees • 32.5% women • 67.5% men • 11 nationalities

Contributing to sustainable development through active participation in UNGC We are a signatory to the UN Global

Labour inspection report

Compact, and we are committed to

e-Boks fulfils the requirements of the

the 2030 Agenda for Sustainable De-

Danish Health and Safety at Work Act

velopment.

according to the latest expection by Danish Working Environment Authority – Arbejdstilsynet (2023).

Lower costs Up to 80% savings on distribution costs by shifting from physical letters to digital documents.

11

Our Approach To ESG With more than 24 years of experience in secure digital infrastructure and partnerships across seven countries, e-Boks creates long-term value through digital innovation, privacy-by-design, and societal engagement. We believe that digitalisati-

on should empower - not exclude - people. That is why we continuously improve accessibility, data security, and climate responsibility in how we design and deliver our services.

e-Boks’ Sustainability Journey: From Commitment to Action

Since 2018, e-Boks has continuously strengthened our sustainability profile by integrating international principles and aligning with globally recognised ESG frameworks. e-Boks became a signatory to the UN Global Compact (UNGC) in 2018 and remains committed to integrating the Ten Principles related to Human Rights, Labour, Environment, and Anti-Corrupti-

Signatory to UN Global Compact

Joined the Carbon Disclousure project

First CoP report

on into our strategy, operations, and supply chain governance. These principles are embedded in our Code of Business Conduct, which is approved by the Board of Directors and Executive Management and extends to all collaborators, contractors, and suppliers. The timeline below highlights key milestones on our ESG journey:

Report in alignment with ESGstuctures

Report in alignment with GRI

Our Science Based climate targets were approved

Joined the Science Based Targets initiative

Report in alignment with VSME standard

Initiated Supplier governance efforts

Since our first Communication on Progress (COP) in 2019, we have reported annually on our progress, ensuring transparency and accountability.

In the years that followed, we advanced our ESG strategy with concrete actions: • In 2021, we aligned our reporting with the Global Reporting Initiative (GRI) Standards and participated in the Carbon Disclosure Project (CDP).

• In 2022, we published our first standalone ESG report.

• In 2023, we established our baseline for greenhouse gas emissions and submitted our near-term climate target to the Science Based Targets initiative (SBTi).

• In 2024, our SBTi target was officially approved, reinforcing our climate commitment.

• In 2025, we aligned our 2024 report with the EU’s Voluntary Sustainability Reporting Standard for non-listed SMEs (VSME), applying both the basic and comprehensive modules with a focus on governance, policies, and targets.

12

Voluntary Sustainability Reporting Standard for non-listed Small- and Mediumsized Enterprises (VSME) The European Union (EU) is setting a new common standard for developments of the ESG-reporting landscape with among others the development of a Voluntary Sustainability Reporting Standard for non-listed Small- and Medium sized Enterprises (VSME). The aim of this standard is to streamline and optimise the SMEs’ reporting efforts by incorporating the data requests of large undertakings. e-Boks supports the EU’s efforts and is applying the VSME standard for the first time in its 2024 report.

Better Data for Customers and Suppliers By adopting the EU’s Voluntary Sustainability Reporting Standard for SMEs (VSME), e-Boks provides customers and suppliers with access to key ESG data aligned with EU-recommended indicators. This enhances comparability across countri-

es and industries and supports large customers— such as financial institutions—in streamlining their own sustainability reporting. By adopting the VSME standard, we are not only increasing transparency but also strengthening our internal policies and setting more ambitious goals for our ESG performance. By reporting under the VSME framework, e-Boks is both future-proofing its governance model and reinforcing its commitment to sustainable growth.

Looking ahead, we are implementing a structured approach to supplier governance, addressing ESG risks and due diligence in our value chain.

Our journey up the maturity curve reflects e-Boks’ ambition to contribute actively to the green and digital transitions by improving transparency, accountability, and resilience across our operations and stakeholder relationships.

e-Boks Way of Doing Business: We place human rights at the core of our business - above all else, it is essential that clients and users trust that e-Boks observes the following principles in the way we develop and manage our systems – integrity, availability, confidentiality, and privacy.

We strive to be a great place to work - our people policy and our Labour Code of Conduct set out to ensure that all e-Boks’ employees, as well as suppliers, no matter where they are in the world, are offered optimal and safe working conditions with respect for their private lives.

At e-Boks, we are in the business of protecting the environment by seeking to decrease our environmental footprint through collaboration with our suppliers, clients and users, as well as by looking at our own emissions. We include a broad range of aspects such as data warehousing to the offering of digital alternatives, and the physical mail distribution and storage of document

Stakeholder trust is our license to operate - trust is a prerequisite for our ability to maintain and grow our business. Our Code of Business Conduct describes how e-Boks strives to engage with our stakeholders with respect and in compliance with rules and regulations, while upholding high ethical standards in everything we do. Acting honestly, decently, and responsibly is a fundamental part of our values. We provide continuous training to our employees, endorse a speak-up culture, and provide means to report unethical behaviour in a safe and anonymous way.

13

Double Materiality and Stakeholder Engagement Double materiality means taking an inside-out perspective in the way a company’s actions may impact people and planet, as well as an outside-in perspective in the way sustainability and climate may impact a company’s operations and finances.

It builds the foundation for a company’s sustainability strategy decisions and reporting efforts. In 2024, e-Boks conducted an initial double mate-

riality assessment to identify ESG topics that are most material to e-Boks business and stakeholders. The stakeholder map below illustrates our identification of some internal and external factors that can impact – or might be impacted by – e-Boks’ operations and value creation. Our double materiality assessment and stakeholder map has been informed by the DI Digital ESG-kit.

What positive and negative impacts do e-Boks and its value chain have on people, society, and the planet?

What financial risks and opportunities do people, society, and the planet create for e-Boks and its value chain?

L SOCIETA CRISIS Sea level rising

Cybersecurity

E

Politicians

C

The courts

STAKEHOLD E S ER National LO supervisions

Local community

S

Resource depletion

Climate change

STAKEHOL DE NAL R E RS T X

Owners

B2B customers

The media Decline of digital trust Nature

Value chain

New regulations from the EU and Denmark

Exclusion of vulnerable groups NGO’s

Data Protection Agency

Geopolitics

Pollution

Loss of biodiversity

14

Users of e-Boks

Banks Employe expectations

Global diseases

Extreme weather

Stakeholder Engagement Overview and Structured Engagement At e-Boks, stakeholder engagement is essential to ensure that our solutions remain relevant, inclusive, and trusted. We maintain structured and ongoing dialogue with a broad range of stakeholders—from employees and clients to regulators, NGOs, and civil society.

Stakeholder

Focus Areas

Structured Engagement

Employees

Employee safety, physical and mental health and wellbeing, inclusion, engagement, labour rights, and people development

Ongoing employee–manager dialogues; eYou employee wellbeing pulse with direct manager; quarterly anonymously well-being employee survey, safe and healthy worksplace assessments (APV) every other year; external Whistleblower function

Current and Future Talent

Employee retention, attraction, and reputation among IT professionals.

Engagement with higher education institutions; internal talent development initiatives

Regulators

Compliance with existing and emerging digital and data-related regulatory frameworks (Danish and International)

Ongoing dialogue with national and EU regulatory bodies; participation in public consultations and working groups

Policy Makers

Alignment with the EU’s Digital Decade strategy and national priorities for digital public infrastructure (Danish and International)

Monitoring of policy developments; on-going dialogues with authorities inside and outside the EU

Industry Associations

Sector-wide expectations for ethical, secure, and sustainable digital solutions

CEO membership in the Danish ICT Policy Committee; participation in Copenhagen FinTech and the Data Ethics Forum (DI and Finansforbundet); consultative committee member of the Universal Postal Union

Public and private clients

Expectations regarding ESG performance and risk management across digital platforms, including financial institutions, utilities, private companies, and public institutions

Annual ESG partner surveys; ESG requirements in tenders; ongoing dialogue on cyber security, privacy, and sector-specific ESG standards

Suppliers

Due diligence, ESG risks, transparency, and collaboration across the supply chain – key ESG partners include data centres, software providers and other critical providers

Supplier assessments; identification of high-risk suppliers; intensified dialogue and alignment with ESG expectations

Owners

Ensure shareholder value

Annual ESG reporting process

Security, accessibility, relevance, user-friendliness, and inclusion of e-Boks solutions

e-Boks citizen panel; in-app feedback prompts; prototyping of new solutions; ongoing dialogue with NGOs representing elderly people and persons with disabilities; reporting of GDPR violations into the Danish Data Protection Agency; Voxmeter annual National Population Survey

Users and Citizens

15

Mapping of Material Topics e-Boks’ core operations are centred on development and data management. We collaborate with external data centres, to deliver secure and efficient infrastructure and document handling. With a lean organisational structure, our own resource and energy consumption is limited—and we continuously strive to reduce it further. As a result, our

main environmental impact stems from the partners we engage with, the energy consumption of end-users, and the broader positive and negative impacts our services have on customers, endusers, and society.

Own Operations

Suppliers

Customers & End-users

Downstream

Upstream Infrastructure & Software

e-Boks has identified the following key themes as material for e-Boks from an Impact-Risk-Opportunity (IRO) perspective in alignment with topics from the European Sustainability Reporting Standards (ESRS).

•

•

• •

•

•

•

•

16

Climate change: We enable our commercial partners, customers and users to reduce their emissions by transitioning from paper based to digital communication, while also reducing our own footprint Biodiversity: By reducing paper consumption, transport, and physical mail, we help lower pressure on natural resources and contribute indirectly to the protection of forests and ecosystems.

Circular economy: In our own operation we support the reuse and recycling e.g. of IT equipment, contributing to lower waste and improved resource efficiency.

Own workforce: As a highly specialised knowledge provider, our ability to attract, retain, and develop diverse talent with technological know-how and understanding of the needs of our customers and end-users, is essential to our innovative success, as well as fostering a work environment that support our employees’ well-being.

Workers in the value chain: We have taken a risk-based approach to our supplier due-diligence process, including a Human- and Labour Rights perspective in accordance with the UNGC principles.

Affected communities: We are committed to inclusive digital access and support the resilience of digital public services. We support the Copenhagen Pledge on Tech for Democracy as part of our commitment to ensure that digital technologies have a positive impact on democracy and human rights.

Consumers and end-users: We serve millions of individuals and business owners and are directly responsible for secure, inclusive digital communication with privacy at the core of our service.

Business conduct: Ethical governance, cybersecurity, and digital trust are central to maintaining our license to operate.

Impact, Risks and Opportunities for e-Boks

Enviormental

Material Material topics topics

Impact

Risk

Opportunity

Climate Change

e-Boks reduces the need for paper production, printing, and physical mail transport, thereby contributing to customers’ Scope 3 reductions and the broader green transition. e-Boks emits CO2 through its own operations, primarily from energy use in data processing and digital infrastructure.

Exposure to stricter climate regulation, carbon pricing, and high client expectations for low-carbon digital services.

Increasing demands for energy data, Scope 3 reporting, and climate targets are putting pressure on digital service providers to document their contributions.

Demand for climate-friendly IT solutions is growing. e-Boks enables clients to reduce emissions through digital communication. e-Boks can position itself as a low-emission digital communication solution that replaces the high-emission physical letters and transportation, and sets a target aligned with the SBTi.

Biodiversity and Ecosystems

By reducing paper use and physical mail transportation, e-Boks indirectly contributes to preserving forests and lowering pressure on natural ecosystems.

Limited if any – biodiversity is not directly affected by core activities, but perception risk may arise in green procurement contexts.

Supports public and private clients’ biodiversity commitments through dematerialisation and responsible digital practices increases business opportunities.

Circular Economy

e-Boks reduces material waste by reducing the use of paper, printing, and physical transportation through digital communication solutions - both for clients, and within our own operations, e.g. by recycling IT equipment.

Failure to manage e-waste responsibly could lead to compliance issues, particularly in light of the EU Circular Economy Action Plan and the Waste Electrical and Electronic Equipment (WEEE) Directive, as well as increasing expectations for circular practices in Danish public procurement frameworks within the digital sector.

Enhances resource efficiency and supports procurement preferences for circular digital solutions among potential new clients.

Own Workforce

e-Boks influences employee wellbeing, safety, diversity, and skills development in its direct workforce.

Talent recruitment and retention challenges – particularly in IT – may hinder innovation and growth.

A strong people culture attracts diverse talent and contributes to resilience and competitiveness. Investing in people enhances employer branding in a competitive market.

Workers in the Value Chain

Working conditions with e-Boks key suppliers are part of e-Boks’ extended responsibility.

Lack of documentation on labour practices may lead to exclusion from contracts or criticism from investors and authorities.

A strong value chain governance approach demonstrates responsibility and alignment with OECD and EU due diligence expectations and strengthens e-Boks competitiveness.

Affected Communities

e-Boks provides critical digital infrastructure and plays a key role in ensuring secure digital access to essential public and private communication and services.

However, as digitalisation accelerates, there is a risk that certain groups—such as older citizens or people with certain disabilities—may become marginalised if they lack the necessary digital skills or support to engage with digital solutions.

Cyber threats and GDPR breaches threaten data privacy, undermines public trust in secure digital platforms, and can cost millions of euros for a business. Digital exclusion of older people and vulnerable groups may impact social cohesion and public trust. This could threaten e-Boks license to operate and, worst case, the loss of trust in using e-Boks as a secure digital platform among public and private clients and end-users.

By working ahead of the data privacy and cyber security compliance curve, and by using state-of-the art security technologies and practices, e-Boks strengthens its own and clients’ competitiveness and resilience. Promoting inclusive access and contributing to resilient digital public services strengthens e-Boks’ social license to operate.

Poor accessibility, low usability, or digital exclusion could lead to reputational damage and complaints.

A user-friendly, inclusive, and secure platform strengthens both e-Boks and our customers’ relationships with end-users.

By ensuring privacy, accessibility, and trust, e-Boks can attract more users and public-private partnerships. By listening to user-experiences and co-creating new solutions, e-Boks can maintain its relevance as a future-fit and value-adding secure digital platform, service and solutions provider.

Non-compliance or unethical behaviour could lead to fines, legal action, and loss of stakeholder trust and clients and erosion of brand value.

A strong ethical foundation and high standards of data security and independent remediating action enhance e-Boks’ brand and enable access to public and financial sector partnerships. Strong governance builds resilience, supports expansion in regulated markets, and strengthens partnerships with public and private actors give assess to new markets.

Governance

Social

End-users

Business Conduct

e-Boks has a direct impact on data protection, digital inclusion, and secure access to essential services for millions of users, who use e-Boks to access essential information. User experience and inclusion have significant societal implications.

Security, ethics, and transparency are directly linked to public trust and the functioning of a digital democracy.

17

The most Material Topics for e-Boks Based on our internal 2024 double materiality assessment and IRO analysis, we have identified the following as our most material topics: •

•

18

Business conduct, climate change, own workforce, workers in the value chain, affected communities, and consumers and end-users.

Circular economy—and, increasingly, biodiversity—are also expected to grow in significance over time.

As a trusted provider to major financial institutions, large private enterprises subject to enhanced sustainability reporting requirements, and the public sector, e-Boks recognises that strong sustainability performance is increasingly essential. This applies not only within our own operations but also across our supply chain and in relation to public procurement, where sustainability criteria are gaining weight as a decisive factor in tenders and partnerships.

ESG Governance Model

The tables below provide an overview of how material topics are linked to our external commitments and governance structures. The management board oversees implementation.

Material topics

External commitments

Internal policies

Monitoring and control

Target/progress

GHG tracking; External validation by Hansen & Ersball Agenda

Targets set 1.5°C 2030 reduction of Scope 1 and 2: 42% by 2030.

Data centres 100% CO₂ neutral by 2030

Enviormental Climate Change

SBTi commitment, Climate risk integrated in ISMS (ISO 27001)

Biodiversity

Commitment to SDG 12 & 13; UN Global Compact

Circular Economy

UN Global Compact

Every year we will plant 10,000 trees through Trees for the Future.org resulting in 120,000,000 trees planted by 2030.

1.5 billion documents sent through our platform by 2030

Data centre policy and supplier selection criteria

Social

Own Workforce

Labour Code of Conduct; D&I Statement; UN Global Compact, D&I Whistleblower policy Statement and system; Employees handbook

eYou employee wellbeing pulse with direct manager, quarterly anonymously well-being 100% APV Compliance employee survey, safe and healthy worksplace assessments (APV) every other year

Supplier Code of Conduct (e.g., restriction against any form of forced or involuntary labour, child labour), Procurement Policy

All key suppliers to adhere to CoC by 2025

Workers in the Value Chain

UN Global Compact

Affected Communities

e-Boks Code of Business Stakeholder dialogue UN Global Compact; Conduct; e-Boks Labour with NGOs; user-centred Digital Inclusion CommitUser NPS of 30 Code of Conduct; Speak service design; accessiment up system bility audits

End-users

User panels; in-app feedback; dialogue with User Experience Guidecivil society; co-creaUN Global Compact; lines; Privacy Policy; tion workshops; User Digital Inclusion Commit- e-Boks Code of Business User NPS of 30 Experience Guidelines; ment Conduct; Speak up Privacy Policy; Voxmeter system annual National Population Survey

Governance Business Conduct

Data Protection and Security

UN Global Compact

e-Boks Code of Business Annual staff training; Conduct; e-Boks Labour Management overCode of Conduct; Spesight ak-up system

Zero breaches or fines in 2024; 95% staff policy awareness

Policy (ISO 27001, GDPR, eIDAS)

Information Security and Data Privacy Policy, Digital trust architecture, Data & Information Security

95% staff trained in policy; few incidents reported to DPA (Datatilsynet)

19

Our Environmental Responsibility: Advancing on Targets

As a digital platform and solutions provider, e-Boks’ greatest contribution to fight climate change and build a greener world is to enable the transition towards better digital societies. Every single action counts to deliver on the call for science-based climate action. That is why we at e-Boks have ramped up our efforts to deliver a transparent and insightful account of our CO2e emissions in accordance with the Greenhouse Gas (GHG) Protocol, and we have committed to emissions reduction targets through the Science-Based Targets initiative (SBTi).

We have worked systematically with our CO2e emissions since 2021 and have in accordance calculated our footprint for scope 1, 2 and material scope 3 categories. 2023 is the baseline year for our progress moving forward. All calculations for Scope 1, 2 and 3 have been validated by Hansen & Ersbøll Agenda, a third-party expert.

and is in line with the Paris Agreement. e-Boks will report on its progress each year, which can also be viewed on the SBTi Target Dashboard.

To reach our near-term target, e-Boks measures our CO2e emissions and accordingly implement actions to reduce impact. In 2024, e-Boks has taken a significant steps converting our fleet of company vehicles to 100% electric. Consequently, e-Boks’ Scope 1 CO2e emissions were reduced by 28.6% in 2024 compared to the 2023 base year, and a total Scope 1 and Scope 2 CO2e emissions reduction of 8.8%. The reduction is expected to be even higher in 2025, as the fleet vehicles were converted to electric in H2.

Climate Change Risks As a digital platform, e-Boks is considering climate change risks associated with its Information Security Management System (ISMS). This consideration is a part of an Amendment 1 to ISO 27001, Progress on our Science-based Targets which e-Boks has implemented. In accordance, Our SBTi targets were approved in Q1 2024, and e-Boks is updating our Information Security and it follows the streamlined validation route for SMEs Data Privacy Policy with the new considerations with a commitment to reduce scope 1 and scope of relevant ISMS climate risks. This update will be 2 GHG emissions by 42% by 2030 from a 2023 complete in 2025. base year, and to measure and reduce its scope 3 emissions. This is classified as a near-term target

CO2e

20

Our 2024 Climate impacts Emission Profile and Distribution In 2024, total Scope 1 and Scope 2 emissions (location-based) amounted to 30.84 tonnes CO₂e—a reduction from 33.80 tonnes in 2023 and 46.0 tonnes in 2022. e-Boks has set a target to reduce Scope 1 and 2 emissions to 19.20 tonnes CO₂e by 2030, equivalent to a 42% reduction from the 2023 base year.

While transport and storage of digital data represent a fraction (1%) of the total CO2e emissions from producing, sending and storing digital letters, we recognize that data centres are still a major contributor to CO2e emissions.

According to the International Energy Agency, data centres worldwide are responsible for 1% of enerHowever, the vast majority of our CO₂e emissions gy-related CO2e emissions. Since 2010, emisstem from Scope 3, which accounted for 475.14 sions have grown modestly, despite the rapidly tonnes in 2024 - representing over 93% of total growing demand for digital services. This is thanks emissions. Scope 3 emissions are primarily related to the energy efficiency improvement efforts and to outsourced data processing, cloud infrastructu- renewable energy purchases by companies in rere, and downstream digital document usage. The gions worldwide. total CO₂e emissions for 2024 across all scopes were 505.98 tonnes, showing a continued reduction trend from 519.40 tonnes in 2023.

Scope 3 (Upstream)

321.49 tons/CO2e 63.54%

Scope 1 Own Operations 3.54 tons/CO2e 0.70%

Scope 3

(Downstream)

153.65 tons/CO2e 30.37%

3.7: Employee commuting

Company owned cars 3.6: business travel

3.5: waste from operations

3.3: Fuel and energy related activitities

Scope 2 (Location based emissions) 27.30 tons/CO2e 5.40%

3.11: Use of sold products

3.1: Purchased goods and services Electricity

District heating

e-Boks total CO2e emissions for 2024 (scope 1-3)

505.98 tons/CO2e 21

1% = digital transport and storage of data over the network 7% = energy used to produce the letter 23% = lifetime footprint of user’s computer 69% = lifetime footprint of sender’s computer

mers’ choice of data centre providers. However, we proactively demonstrate the full potential of transitioning to digital post, also advocating for choosing data centre providers that have committed to setting scienced-based targets towards the Paris Climate Agreement.

Another major scope 3 impact is from downstream Category 11: Use of sold products, which amounts to 30.37% of total CO2e emissions. For e-Boks this covers every time a standard digital letter of 1 MB is written and read on a computer using Wi-Fi, Nevertheless, emissions must halve by 2030 to representing estimated 3.3 g CO2e per standard get on track with the IEA’s Net Zero Emissions by digital letter. In comparison, a physical letter of an 2025 Scenario. Our data centre provider, KMD, equivalent size, produced and distributed in Denhas set an ambition of becoming net-zero CO2 mark in 2021, was estimated to contribute to 28.7 emissions from its own business activities (scope g CO2e. This means that e-Boks has an overall 1 and scope 2) by 2030 and achieve 100% re- positive downstream impact on CO2e, enabling newable energy consumption by 2026. the transition from physical to digital post. See also As we internationalize our business across the our case study on the following pages, which deworld, we have little direct impact on our custo- scribes our historical impact in Denmark.

Our Way Forward

e-Boks recognizes the need for setting absolute timebound corporate CO2e reduction targets, also in Scope 3. As a digital platform and solutions provider, however, we have limited control over the areas where our biggest CO2e emissions occur, upstream as well as downstream.

One crucial metric is the GHG emission intensity figure, which helps us measure the efficiency of our operations in terms of emissions generated based on number of digital documents.

This number indicates that even though e-Boks’ total CO2e emissions increase as the number of digital documents also increase, the CO2e emissions pr unit of output are considered relatively low.

Our GHG emission intensity figure covers scope 1 and scope 2 emissions as these are the material emissions that e-Boks has the most control over. By employing this metric, we continue to drive sustainable progress and embed sustainability throughout our operations. Currently it does not 22

cover scope 3 emissions, as e-Boks has limited direct influence on these emissions.

Scope 1 + 2 carbon intensity figure in 2024

5.29 kg/ CO2e For every 1 million digital documents distributed

Nonetheless, we strive to create a culture where we think green in the way we conduct ourselves on a day-to-day basis, including in the way we procure products and services, and by being an active stakeholder and sustainable partner with our suppliers and customers. We are continuously exploring ideas as to how we can contribute to lowering our direct company emissions in scope 1 and scope 2, but more importantly, also how we can be a catalyst for change in our supply chain and among our partners to lower our scope 3 emissions.

Case Study: e-Boks’ Contribution to the Danish Digital Transition and its Environmental Long-term Impact Background e-Boks has been a trusted provider of secure platforms and digtal postboxes for more than 24 years. With the establishment of a digital postbox in 2001, e-Boks was key in starting the digitalization of Denmark that today is placing the country among the top-three in the UN e-Government survey, and as the world’s most competitive digital economy by the IMD World Digital Competitiveness Ranking, among other things due to Denmark’s ability to shield personal data from cyber-attacks. Today, Denmark is ‘digital by default’ with 90% of the population having a secure digital postbox. e-Boks’ Societal Impact over a Decade It is e-Boks’ vision to create better digital societies and keep contributing to the sustainable development of society through digital transformation. The following model case description highlights how e-Boks, over the past decade, has contributed to a significant shift in the way private businesses and public authorities communicate and send letters in Denmark, and through that also has had a positive impact in reducing CO2e emissions and lowing the material footprint for the Danish population.

23

Model 1: e-Boks’ Contribution to Digital Transformation – a Summary e-Boks user accounts, physical letters sent and digital documents sent (2013-2021) 7

700 615M

6

600

500

5

400

4

300

3

200

2

100

0

181M

157M

2013

1

2014

2015

2016

e-Boks user accounts

2017 Physical letters

This model shows the historic development in e-Boks user accounts from 2013 to 2021 in a Danish context (silo diagram) combined with the historic development of digital documents available through the e-Boks platform compared to the total number of physical letters sent in Denmark .

1

2018

2019

2020

2021

Million user on e-Boks (private and business users)

Units sent (Milions)

542M

0

Digital documents

Physical letters 28.7g/CO2e per letter The CO2e emission per physical letters includes the emission from production (2.7g) of the paper and the distribution (26g) of the letters.

From 2013 to 2021, the e-Boks user base increased from 4 million to 6 million in Denmark. In the same period, the volume of digital letters grew to three times the number of physical letters – 542 million documents were available through our platform in 20212.

The model shows how e-Boks over the past decade has con-

Digital documents 3.3g/CO2e per document The CO2e emission per digital document distributed is based on the scope 3.11 emission data. Emissions have been calculated based on an average size of each digital letter of 1 MB and assuming that it is written and read on a computer using Wi-Fi.

tributed to a significant shift in the way people communicate and send letters in Denmark and how it over time has been possible to create a tipping point from physical letters to digital post (achieved in 2016).

1

The data for the physical letters sent in Denmark is derived from Trafikstyrelsens “Redegørelse for 2021 om det danske postmarkeds tilstand og udvik-

ling” 2

The model shows the relation between letters sent based on numbers from the Danish postal service, PostNord and digital documents available

through the e-Boks platform.

24

Model 2: e-Boks Contribution to Reducing the CO2e Footprint – a Summary Emitted CO2-e for physical letters (PostNord) and digital post (e-Boks) in the period 2013-2021 25,000

Total CO2e emitted by 615M physical letters sent

20,000 Total CO2e emitted by 181M physical letters sent

Tons CO2e

15,000

Total CO2e emitted by 542M digital documents sent

10,000

5,000

Total CO2e emitted by 157M digital documents sent

2013

2014

2015

2016

Physical letters

2017

2018

2019

2020

2021

Digital documents

The model highlights how e-Boks is striving towards achieving

happened despite the amount of sent letters remaining the

its purpose and mission by reducing the environmental foot-

same. This is seen as in 2013 772 million letters were sent,

print of its services. The data highlighted in the model reveals

whereas 723 million letters were sent in 2021.

that while the number of physical letters has decreased in the period, the number of digital documents has increased while

The reason why CO2e emissions from digital documents first

still emitting less CO2e overall3. This is an important insight,

increases and subsequently decreases, is due to the relation

as it indicates how a transition towards digital documents can

between the changing CO2e emission factor and develop-

considerably reduce the amount of CO2e emitted compared

ment in number of documents. From 2013 to 2015 e-Boks

to conventional physical letters.

total number of documents distributed almost doubled, which was followed by a more steady growth in volume. Additionally,

Model 2 tracks the development in physical letters and digital

from 2014 to 2021 the calculated CO2e emission from digital

documents and shows the total emitted CO2e from each of

documents fell from 35g/CO2e per document to 3.3g/CO2e

these over a historic period from 2013 to 2021. The graph

per documents. The combination of these two factors has led

shows a positive trend in terms of climate impact, as the CO2e

to the graph’s trajectory.

emissions from both the physical letters and digital documents has fallen over the period, reaching an all-time low in 2021.

The graph shows that total CO2e emissions have fallen from approximately 28,900 tons to approximately 7,000 tons of CO2e emissions, this constitutes a 76% decrease in CO2e emissions or approximately 21,900 tons in total. This fall has 3 The reduced CO2e emissions for physical letters are also attributed to PostNord’s own efforts to reduce CO2e emissions: https://www.postnord.com/ sustainability. Last visited June 2025 4 See appendix B for a detailed elaboration 5 The emission number per digital document distributed is based on a French study conducted in 2022 by the researcher Basile Fighier: https://www.sami. eco/blog/empreinte-carbone-email. Last visited June 2025

25

Our Social Responsibility:

Commitment to Human and Labour Rights and Societal Responsibility At e-Boks we have a deep understanding of our role in society. Our operations effect a wide range of stakeholders from our own employees to workers in our value chain, and to the broader society, including end-users and affected communities.

In doing so, we help strengthen democratic access to essential information and reinforce trust between citizens, businesses, and public institutions.

We recognise our influence on: • The well-being and development of our e-Boks’ vision is to create better digital societies. employees As a signatory to the UN Global Compact and a • Workers in our supply chain, especially in higsupporter of SDG 16: Peace, Justice and Strong her-risk geographies, through clear expectaInstitutions, we place human rights at the core of tions on human rights, labour conditions, and our business, and through our commitment to supplier assessments. secure digital access and our Code of Business • And most significantly, the 24 million user acConduct, we emphasize that all our products counts of e-Boks globally, whose access to and services are designed to support a resilient secure, transparent, and reliable digital comand inclusive digital infrastructure, while keeping munication shapes their interaction with pubour users’ needs, rights, and interests in mind. lic and private services.

26

e-Boks’ Social Scopes As illustrated in the figure Social Scopes (source: Hansen & Ersbøll Agenda), our ability to measure and manage impact varies across different stakeholder groups. It is easier to control our impact on our own workforce, than it is on workers in our value chain or on end-users and affected communities. However, the number of individuals in-

fluenced increases significantly in Social Scope 3, where our digital infrastructure reaches 24 million user accounts globally. This reinforces the importance of responsible product design, accessibility, and long-term societal trust and dialogue with stakeholders, especially in our role as a provider of critical digital services.

SOCIAL SCOPE 1

Own workforce

SOCIAL SCOPE 2

Workers in the value chain

SOCIAL SCOPE 3

Affected communities, consumers and end-users

The further out in scope, the more difficult it is to measure and control impact.

SOCIAL SCOPE 1

Our Employees

- Attracting, Retaining, and Developing Digital Talent As a highly specialised knowledge provider, e-Boks’ ability to attract, retain, and develop digital talent is essential to our innovation and long-term success. At the same time the working conditions and possibilities for professional growth are very important for our employees. In 2024, e-Boks employed 83 people on permanent contracts, all based in Denmark.

e-Boks’ ability to attract, retain, and develop digital talent is essential to our innovation and long-term success. At the same time the working conditions and possibilities for professional growth are very important for our employees.

We aim to make e-Boks a great place to work by fostering a responsible and inclusive workplace that supports employee well-being, professional Adapting the Workplace to a Changing World growth, and equitable working conditions. Our As a highly specialised knowledge provider, success is reflected in our employee turnover rate 27

of 10.8% in 2024, which is well-below the turnover rate of IT companies in Denmark. We closely monitor this figure as part of our efforts to support retention and employee well-being. Talent recruitment remains a particular challenge in the IT-sector, where competition is high and labour shortages are increasing. To strengthen our talent pipeline, we have launched several initiatives.

For example, we collaborate with higher education institutions on student projects. A recent partnership with two students from DTU resulted in launching our digital identity wallet – e-Wallet.

Code of Conduct and Grievance Mechanisms e-Boks has a formal Code of Business Conduct and a human rights policy in place for all employees. An independent grievance mechanism is available to report concerns confidentially, including through the Zoios feedback platform and workplace assessments.

Incident Reporting Working under Danish employment law and regulations, there are no incidents of child labour, forced labour, or human trafficking within e-Boks.

There were also no confirmed human rights incidents involving workers in the value chain or afTraining and Development Learning and development are critical to long-term fected communities. One internal case related to employee engagement and performance. Howe- discrimination was handled appropriately through ver, training data for 2024 was not available. We internal channels. acknowledge this as a gap and are working to strengthen our efforts to improve data collection. Policies Supporting Social Responsibility: • Human Rights Commitment • Labour Rights Commitment Gender Diversity and Inclusion e-Boks is committed to promoting gender equality • Employee Handbook and an inclusive culture. Among our employees, we • Information Security and Data Privacy Policy have a wide age range and growing diversity in na- • Health & Safety Workplace Assessment tionality and backgrounds. While gender diversity • Zoios employee well-being Survey quarterly remains a challenge in a male-dominated IT-sector, • eYou / People Development Dialogues we always encourage everyone to apply regardNext Steps less of gender, age, ethnicity, religion or disability .

We will continue to enhance our social responsibility practices by: We are committed to equal opportunities in hi• Strengthening gender balance at all levels ring, pay, and promotion. All employees are • Improving training data collection and transpaentitled to parental leave under Danish law. rency • Maintaining a zero-accident culture through proactive health and safety measures.

Our office facilities contribute to a:

2024*

2023*

2022

2021

Good working environment

82%

82%

84%

81%

This is a psychologically and emotionally healthy place to work

88%

88%

84%

74%

This is a physically safe place to work

99%

99%

100%

97%

People care about each other here

89%

89%

88%

88%

* The workplace assessment was conducted in February 2024.

28

Gender diversity among all employees

Gender diversity in management board

25%

32,5% Women

Women

Men

Men 67,5%

75%

89%

83

11

of our employees care about other at work

number of employees in 2024

nationalities represented amongst our employees in 2024

Age diversity among all employees 18-25 years old

+56 years old

26-30 years old 19%

6%

8%

31-35 years old 13%

29% 46-55 years old

25% 36-45 years old

29

SOCIAL SCOPE 2

Workers in the Value Chain e-Boks is committed to promoting responsible business conduct across its value chain in alignment with the UN Global Compact’s Ten Principles, including those related to human rights and labour standards. To support this commitment, e-Boks has adopted a Code of Business Conduct that sets clear expectations for ethical behaviour, working conditions, and respect for fundamental rights throughout our supply chain.

As part of its ongoing efforts to improve supply chain due diligence, e-Boks is also implementing a supplier assessment process that will evaluate

30

critical suppliers on criteria such as human rights risks, working conditions, and compliance with international standards. This is particularly relevant for suppliers operating in higher-risk geographies, such as our data processing partner in India. Here, e-Boks places special emphasis on ensuring that workers’ rights are respected and that adequate safeguards are in place.

These initiatives reflect e-Boks’ broader ESG commitment and its role in fostering fair, safe, and responsible working conditions beyond its own operations.

SOCIAL SCOPE 3

Global Reach and Resilience - Affected Communities and Endusers In 2024, more than 24 million user accounts worldwide accessed an e-Boks-powered secure digital postbox to receive, sign, and store essential documents from over 30,000 public and private institutions - including banks, insurance and pension providers, and utility companies. This widespread adoption reflects our core purpose: to build better digital societies and strengthen individuals’ legal identity, enabling secure communication, and promoting transparent access to both public and private services.

basic social necessity - particularly for vulnerable or underserved communities.

The increasing frequency of global crises - from pandemics to geopolitical instability - has underscored the importance of robust, reliable digital infrastructures. These developments have reinforced e-Boks’ role in society, helping to ensure continuity, accessibility, and resilience even in times of uncertainty. As more aspects of daily life are becoming digitalized, the ability to safely access official documents, exercise legal rights, and engage with institutions digitally have become a

In Denmark alone, over 90% of the population - equivalent to 5.3 million citizens - access the e-Boks platform using their secure digital ID. This underscores our role not only as a digital service provider, but also as a key enabler of democratic access, individual rights, and institutional trust.

Ensuring digital inclusion, privacy, and equal access to information are fundamental to our societal impact. e-Boks is designed to be secure, accessible, and user-friendly for all groups, regardless of digital literacy, age, or socioeconomic status.

By maintaining high standards for data protection and universal accessibility, we aim to promote trust and bridge the digital divide.

e-Boks proactively collects and applies user feedback to improve the usability, security, and accessibility of its digital services.

e-Boks asked users how they prefer to communicate with public authorities and private companies. The results show: •

88% find it attractive to be able to respond directly in e-Boks to a message from, for example, their municipality or insurance provider.

• 93% find it attractive to receive a reminder via SMS or email when they receive a new message in e-Boks.

• 95% find it attractive to be able to complete and return a form—such as a consent form—directly in e-Boks, rather than printing, filling out, scanning, and sending it back manually.

Source: e-Boks’ website

31

Case: Pension Providers Strengthen Engagement via e-Boks In 2024, several major pension providers—including PFA, PKA, AP Pension, Velliv, and others - moved their customer communications to e-Boks to improve engagement and reduce digital friction. This shift was driven by a key insight: traditional self-service platforms and email often fail to reach customers effectively.

A national survey by Voxmeter revealed that: • Two-thirds of Danes prefer receiving pension information through e-Boks.

• One-third regularly delete emails without reading them.

• One in five Danes has mistakenly deleted a legitimate email as spam.

By using e-Boks, pension providers now benefit from: • Significantly higher open and conversion rates (often over 90%) • Greater customer trust and reduced phishing concerns • Faster response times and improved document signing For pension customers, this means more reliable access to critical information on coverage, contributions, and rights—delivered via a secure and familiar platform they already trust.

As e-Boks expand our activities in counties with less digital mature populations we develop new solutions to meet their need.

Source: e-Boks’ website

32

Our Governance Responsibility:

Trust, Security, and Stability

At e-Boks, governance begins with trust. As a provider of critical digital infrastructure, we are entrusted with handling sensitive information for millions of citizens, public authorities, and private companies. Ensuring the reliability, stability, and security of our platforms is not just a technical priority — it is a fundamental obligation to society.

Our users must be confident that they can access their secure digital postbox at any time — and that their data is consistently protected, private, confidential and protected from external threats. This commitment lies at the heart of our governance framework and underpins all our systems, policies, and decisions.

Global Reach and Resilience Recent global crises, such as the COVID-19 outbreak, highlighted just how vital secure and efficient digital infrastructure is for maintaining societal continuity. These developments have further reinforced e-Boks’ role as a critical infrastructure

provider, delivering digital services that are resilient, accessible, and secure — even in times of uncertainty. And the importance of being a trusted partner by public and private institutions.

33

Governance, Risk, and Information Security As reflected in our Double Materiality Assessment, strong corporate governance, internal controls, and information security remain among the most material issues for e-Boks — both in terms of our societal impact and the financial operational risks - we must manage. In a time marked by growing geopolitical instability and increasingly sophisticated cyber threats, maintaining trust in the security, accessibility, and usability of our platform is more critical than ever.

As phishing attempts and cyber threats continue to rise, public trust in traditional emails and

text messages is steadily eroding. In this context, e-Boks is stepping forward as a trusted solution, offering secure digital post services that protect both senders and recipients from potential data breaches and brand-damaging cyberattacks.

Growing scepticisms towards traditional emails and text messages underscores the demand for safer communication methods.

That is why e-Boks continuously strengthens its governance systems and safeguards the data and infrastructure - ensuring both resilience and regulatory compliance.

Corporate Governance and Ownership e-Boks is an independent limited company (A/S) governed by Danish company law, co-owned by Nets and PostNord. The company is governed by a board of directors and an executive management team, who are jointly responsible for en-

suring compliance, ethical conduct, and strategic alignment with our ESG commitments. e-Boks maintains a clear division of responsibilities between board oversight and daily operations.

Gender Diversity at the Governance Level e-Boks is committed to promoting diversity and inclusion at the governance level, recognising that a broader range of perspectives strengthens decision-making and accountability. As of the 2024 reporting year, e-Boks had a management board comprising 8 executives, of whom two were women and six were men. This corresponds to

a female-to-male management ratio of 0.33, up from 0.25 in 2020. A balanced representation in leadership – both from a perspective of nationality, gender, age and background - remains part of our broader ESG commitment and alignment with good corporate governance practices.

Policies and Ethical Standards e-Boks has implemented a robust set of policies and governance mechanisms to ensure ethical business conduct, data protection, and employee awareness. These policies are integral to our commitment to transparency, accountability, and the responsible handling of information.

34

Key Policies and Governance Instruments: • Code of Business Conduct • Labour Code of Conduct • Privacy Policy • Whistleblower Policy • Information Security Framework (ISO/IEC 27001 compliant) • Employee Nano Learning Programme on Security and Ethics

Code of Business Conduct Employees as well as business partners and suppliers comply to the e-Boks Code of Business Conduct.

The Code of Business Conduct covers: Legal compliance and human rights

Environment

Labour standards incl. freedom of association, forced labour, child labour, non-discrimination and employment conditions

Non-compliance and corrective action

Health and safety

Confidential information

Anti-corruption incl. prohibited business practice incl. gifts, hospitality and expenses, money laundering, and breach of competition laws

Labour Code of Conduct and Speak-Up Culture In 2022, e-Boks introduced a dedicated Labour Code of Conduct to clearly articulate our expectations in relation to human and labour rights — especially as we expand globally. The policy encourages an open “speak-up culture”, where employees are supported in raising concerns and dilemmas related to ethical conduct or potential violations of our labour standards. e-Boks monitoring of governance are all in green, as shown in the table on the right.

2024

2023

2022

2021

100% of our employees know and understand our Information Security Policy

Green

Green

Green

Green

We have a high level of security, ratedby PwC

Green

Green

Green

Green

100% of our employees know and understand e-Boks of Business conduct

Green

Green

Green

Green

Through our supplier contracts, all significant suppliers agree to adhere to e-Boks Code of Business Conduct

Green

Green

Green

Green

35

Privacy and Ethical Conduct All employees at e-Boks are required to adhere to our Code of Business Conduct, which sets out clear expectations for responsible behaviour. Compliance is monitored through internal processes in our Security and HR functions.

Immediate corrective action is taken in case of non-compliance. e-Boks does not tolerate violations of its Code of Business Conduct — whether due to deliberate actions, complacency, indifference, or poor judgement. An independent Whistleblower function allows for remediation without retaliation. In the event of non-compliance, we take prompt remedial action and implement preventive measures to avoid recurrence.

IT Security Governance The e-Boks security governance model and Information Security Management System (ISMS) is based on ISO 27001:2013, This international standard provides organisations across all sectors with guidance on establishing, implementing, maintaining, and continually improving an ISMS.

and Data Privacy Policy also describes and supports the functional areas and their security work, which include roles, responsibility, and accountability for the security personnel and the Security Board representing all areas of the organisation.

The Security Board is accountable for security and compliance in e-Boks, which ensures that all decisions and solutions have security at its core by incorporating the Defence in Depth principle and Privacy by Design. The Information Security and Data Privacy Policy is part of our Employee Handbook and is mandatory reading for all employees. In addition, we provide mandatory education and awareness training on a regular basis. Among other things, we have introduced a nanolearning system, where all employees are kept up to date on topics such as digital privacy, security, and compliance. Training comprises regular quizzes and questionnaires from both the Security and Compliance team building on the concept of STAR – Stop, Think, Ask, React.

In 2024, 3 incidents concerning consumers or Our overarching Information Security and Data end-users were reported to the Danish Data ProtePrivacy Policy addresses the critical importance of ction Agency (Datatilsynet), which is a lower numsecurity and compliance with the EU General Data ber of incidents reported than in previous years.

Protection Regulation (GDPR) and ISO 27701 in all aspects of the business. The Information Security

Supplier Governance Contractor and supplier selection is subject to a procurement process, which includes a checklist that enables us to conduct due care and due diligence in a structured process that encompasses our e-Boks Code of Business Conduct and high security standards.

pliers were covered ranked in categories of high, medium, and low risk. Data centres are categorized as high risk from an IT security perspective, and here we conduct annual audits, including data centre inspections, user attestations, and testing of effective security controls, while simultaneously following up on previous audits to ensure proper Among our key suppliers are data centres and security measures are addressed. cloud partners which are ISO 27001 certified. Our contract templates include our Code of Conduct. PwC conducts assurance of e-Boks overall IT e-Boks prepares an annual audit and assurance security and compliance, including third-party asschedule covering internal and external audits in surance of our data centre providers. relation to IT security compliance. In 2024, 10 sup36

The 2024 PwC management letter stated that e-Boks has a high degree of IT security and controls in place with no exceptions noted in the way e-Boks demonstrates leadership commitment, plans, supports, operates, evaluates performance and makes continuous improvements in compliance with its ISO 27001:2013 information security management system.

kings requesting sustainability information from their suppliers.” e-Boks has chosen to adopt this standard in support of, and alignment with, the EU’s guidelines for ESG data collection from the supply chain.

In addition, the SAQ includes topics relevant to value chain workers’ rights, based on materiality assessment recommendations from the ConfederaNew Supplier Assessment tion of Danish Industry (DI) and the Ten Principles In 2024 and 2025, e-Boks developed a supplier of the UN Global Compact.

ESG-assessment process to strengthen our sus- The information gathered will be used internally to tainability governance structures and learn how establish an overview of each supplier’s sustainasuppliers implement sustainability practices in bility maturity. This overview will help guide how their business operations. e-Boks is continuous- e-Boks structures and prioritizes its future sustaily assessing and improving its own sustainability nability efforts within the supply chain. efforts, and this initiative represents a first step towards extending that assessment to its supply The SAQ covers ESG topics and corresponding chain. Thus, e-Boks will send out a supplier as- questions, drawn directly from the EU’s voluntasessment questionnaire (SAQ) to a selected group ry sustainability reporting standard, VSME. This of suppliers based on an internal ESG-risk and standard is designed to ”provide information that -materiality screening. will help satisfy the data needs of large undertakings requesting sustainability information from The SAQ covers ESG topics and corresponding their suppliers.” e-Boks has chosen to adopt this questions, drawn directly from the EU’s volunta- standard in support of, and alignment with, the ry sustainability reporting standard, VSME. This EU’s guidelines for ESG data collection from the standard is designed to ”provide information that supply chain. will help satisfy the data needs of large underta-

Anti-Corruption In 2024, no convictions or fines related to corruption were registered.

37

ESG Dashboard On the following pages, e-Boks’ 2024 ESG-data are presented. The data is aligned with the VSME disclosure requirements for the first time, and accordingly data has not been retrieved for disclosure

Basis of preparation

Unit

2030 Target*

requirements before 2024. The ESG-dashboard includes the disclosure requirements that were deemed material to e-Boks. A full dashboard is available upon request.

2024

2023

2022

2021

Refernece to external framework:

See page 13

VSME B1 24a

None

VSME B1 24b

Reporting Scope

Individual basis

VSME B1 24c

Sites of operations

See page 45

VSME B1 24e vi + vii

Certifications

See page 19

VSME B1 - 25

Aktieselskab (A/S)

VSME B1 24e i

639100

VSME B1 24e ii

Reporting Scope - VSME

Excluded reporting points due to confidentiality

Form of undertaking structure

NACE sector classification code(s) Balance sheet size

Mil. DKK

172.90

VSME B1 24e iii

Turnover

Mil. DKK

201.15

VSME B1 24e iv

Head count

83

Number of employees

84

76

87

VSME B1 24e v + 2023

What type of products or services are offered by the undertaking?

See page 9

VSME C1 - 47 (a)

What markets does the undertaking operate in?

See page 9

VSME C1 - 47 (b)

Describe the main business supplier and client relationships

See page 15

VSME C1 - 47 (c)

Key strategy elements that relate to or affect sustainability issues

See page 10-11

VSME C1 - 47 (d)

Policies, targets, highest management level

See page 19

VSME B2 - 26 + C2 - 48

38

2030 Target*

Refernece to external framework:

Environment

Unit

Fuel from non-renewable sources

Mwh

13.76

VSME B3 - 29

Fuel from renewable sources

Mwh

1.56

VSME B3 - 29

Electricity from non-renewable sources

Mwh

6.25

VSME B3 - 29

Electricity from renewable sources

Mwh

54.96

VSME B3 - 29

District heating from non-renewable sources

Mwh

73.21

VSME B3 - 29

District heating from renewable sources

Mwh

346.39

VSME B3 - 29

CO2e emissions within scope 1

Ton

3.54

4.96

13.44

15.70

VSME B3 - 30 + e-Boks KPIs

CO2e emissions within scope 2 (based on location) **

Ton

27.3

28.85

32.51

14.70

VSME B3 - 30 + e-Boks KPIs

Total scope 1 and scope 2 CO2e emissions (based on location) **

Ton

30.84

33.81

45.95

30.40

VSME B3 - 30 + e-Boks KPIs

Ton

475.14

485.62

2,187.78

VSME C3 - 50 + e-Boks KPIs

Ton

505.98

519.43

2,233.73

VSME C3 - 50 + e-Boks KPIs

Tons CO2e/ turnover mil. DKK

2.5154

VSME B3 - 31

CO2e reduction target - Scope 1 + 2

See page 20

VSME C3 - 54

Most important actions to reach the reduction targets

See page 22

VSME C3 - 54

Transition plan for climate change

See page 22

VSME C3 - 55

Description of climate related risks for e-Boks

See page 20

VSME C4 - 57 - 58

CO2e emissions within scope 3 *** Total CO2e emissions for scope 1, 2 og 3

CO2e intensity

19.2

2024

2023

2022

2021

Documents sent yearly

Mil.

1,500.00

582.00

599.00

546.00

744.00****

e-Boks KPIs

Trees planted

No.

120,000

60,000

50,000

40,000

30,000

e-Boks KPIs

Land use area

m2

1647

VSME B5 - 34

Total sealed area

m2

1647

VSME B5 - 34

Water withdrawal

m3

243.82

VSME B6 - 35

Water withdrawal - from sites located in water deficit areas

m3

0

VSME B6 - 35

See page 20-25

VSME B7 - 37

Applying principles of circular economy

39

2030 Target*

Refernece to external framework:

Social

Unit

Permanent employment

Head count

83

VSME B8 - 39 (a)

Temporary employment

Head count

0

VSME B8 - 39 (a)

Male employees

Head count

56

VSME B8 - 39 (b)

Female employees

Head count

27

VSME B8 - 39 (b)

“Other” employees

Head count

0

VSME B8 - 39 (b)

“Non-disclosed” employees

Head count

0

VSME B8 - 39 (b)

Workers employed with contracts in Denmark

Head count

83

VSME B8 - 39 (c)

Employee turnover rate

%

10.8

VSME B8 - 40

Work related accidents

No.

0

VSME B9 - 41 (a)

0

VSME B9 - 41 (a)

Frequency of work related accidents

2024

2023

2022

2021

Work-related fatalities as a result of a work-related injury or accident

No.

0

VSME B9 - 41 (b)

Work-related deaths as a results of ill health due to working conditions

No.

0

VSME B9 - 41 (b)

Workers paid in accordance with national laws or collective bargaining agreements

%

100

VSME B10 42 (a)

Ratio

0.33333

VSME C5 - 59

Code of conduct for own workforce including Child labour Forced labour Human trafficking Discrimination Safety/Accident prevention

Yes

VSME C6 - 61 - 62

Complaints-handling mechanism for its own workforce

Yes

VSME C6 - 61

Ratio between female and male employees at management level

Confirmed incidents in its own workforce related to child labour

No.

0

VSME C7 - 62

Confirmed incidents in its own workforce related to forced labour

No.

0

VSME C7 - 62

Confirmed incidents in its own workforce related to Human trafficking

No.

0

VSME C7 - 62

Confirmed incidents in its own workforce related to Discrimination

No.

See page 28

VSME C7 - 62

Confirmed human rights incidents involving consumers and end-users - e-Boks users

No.

3

5

4

6

VSME C7 - 62 + e-Boks KPIs

e-Boks user accounts

Mil.

24.1

23.6

22.7

21.7

e-Boks KPIs

Share of Danish population using e-Boks

%

90

90

90

90

e-Boks KPIs

40

30

2024

2023

2022

2021

Refernece to external framework:

Share of men and women in senior management

25% women / 75%men

14% women / 86% men

14% women / 86% men

25% women / 75% men

e-Boks KPIs

Share of men and women amongst all employees

32.5% women / 67.5% men

32% women / 68%men

26% women / 74% men

25% women / 75% men

e-Boks KPIs

Social

Unit

2030 Target*

Our office facilities contribute to a: Good working environment

%

82

82

84

81

e-Boks KPIs

This is a psychologically and emotionally healthy place to work

%

88

88

84

74

e-Boks KPIs

This is a physically safe place to work

%

99

99

100

97

e-Boks KPIs

People care about each other here

%

89

89

88

88

e-Boks KPIs

2024

2023

2022

2021

Refernece to external framework:

Governance

Unit

Ratio between men and women at the governing body level

Ratio

2030 Target*

0.33

VSME C9 - 65

100% of our employees know and understand our Information Security Policy

Green

Green

Green

Green

e-Boks KPIs

We have a high level of security, ratedby PwC

Green

Green

Green

Green

e-Boks KPIs

100% of our employees know and understand e-Boks Code of Business Conduct

Green

Green

Green

Green

e-Boks KPIs

Through our supplier contracts, all significant suppliers agree to adhere to e-Boks Code of Business Conduct

Green

Green

Green

Green

e-Boks KPIs

* Currently e-Boks only employs 2030 targets for selected ESG parameters. We are in the process of evaluating how we can best set targets, measure and track relevant KPI’s relating to our ESG activities, in order to ensure a high level of transparency in our reporting. ** The disclosure method for Scope 2 CO2 emissions has been updated, and thus location-based emissions have been seperated from market-based emissions, and only location-based emissions are included in the ESG Dashboard. This aligns with the accounting methods in the VSME-standard and the GHG Protocol. The update applies to all years to ensure comparibility. *** The 2023 calculation has been performed following the GHG Protocol Corporate Accounting and Reporting Standard, and The Corporate Value Chain (scope 3) Accounting and Reporting Standard. The 2022-2023 variation in Scope 3 and overall can be explained as follows: The original calculation in Scope 3 was based on a life-cycle analysis which included relative CO2 emissions from the production of PCs, as a prerequisite for using e-Boks’ platform. Recognising that this calculation method involves a double counting of emissions, we have in 2023 only included Scope 3 category 11 – the direct consumption of electricity when using e-Boks’ platform – in actuality, scope 1 and 2 for the user – which is in accordance with the GHG protocol. This led to a significant reduction of e-Boks total CO2 impact from 2022 to 2023.

41

**** The reason why the ESG dashboard shows a drop from 744 to 546 million documents sent between 2021 and 2022, is due to a change in methodology. Previously all types of messages were included, where aswhereas now, e-Boks has decided to only count the documents which result in an invoice to a customer. We hope that this will give a more accurate depiction of the volume of digital documents distributed on the e-Boks platform. The 542 million documents mentioned in the historical model on page 10 corresponds to the 744 milionmillion documents in the ESG-dashboard for 2021 after the updated method has been applied.

Sources

Data centres CO2 emissions Source: https://c2e2.unepccc.org/kms_object/global-growth-potential-of-energy-efficient-datacentres/ Data on paper production in Scandinavian context Source: https://www.holmen.com/en/paper/sustainability/sustainability-stories/how-to-undrestandcarbon-footprints/ PostNord approach to sustainability Source: https://www.postnord.com/sustainability PostNord sustainability reports with data on distribution emissions Source: https://www.postnord.com/da/investor-relations/regnskabsaflaggelse/arlige-rapporter-ogbaredygtighedsrapporter Denmark remains among the best countries in the world to provide digital public services Source: https://publicadministration.un.org/egovkb/en-us/Reports/UN-E-Government-Survey-2022 det%20danske%20postmarkeds%20tilstand%20og%20udvikling.pdf French study with emissions for digital letters Source: https://www.sami.eco/blog/empreinte-carbone-email Number of letters sent in 2021 in Denmark Source: https://www.trafikstyrelsen.dk/Media/638094774603594297/Redeg%C3%B8relse%20for%20 2021%20om%20 Third party ESG expert https://www.heagenda.dk

Appendix A Model 1

Explainer: Note that the model illustrates a historical development in a Danish context and therefore does not necessarily reflect expected developments in other countries. Further, it cannot be assumed that emissions in other countries will follow the same development path, as this depends on several variables in each country, including energy composition and mix.

42

The model shows the relation between letters sent based on numbers from PostNord and digital documents available through the e-Boks platform. For the sake of transparency we want to highlight that documents available through our platform doesn’t equal read documents 1-to-1, as there are multiple digital solutions for Danish consumers. However, a survey conducted in 2022 shows that 90% prefer e-Boks to other digital sites. Therefore, we believe the numbers are still valid.

Sources: Trafikstyrelsen: https://www.trafikstyrelsen.dk/Media/638094774603594297/Redeg%C3%B8relse%20 for%202021%20om%20det%20danske%20postmarkeds%20tilstand%20og%20udvikling.pdf e-Boks: https://www.e-boks.com/danmark/da/nyheder/vi-goer-klar-til-ny-vaekst

Model 2 Explainer: The model displays a development that has been supported by e-Boks, but not necessarily driven by e-Boks. The reduced CO2e emissions for physical letters cannot be solely attributed to digitalisation in connection with e-Boks. The general technological development in Denmark, PostNord’s own initiatives, cultural behavioural changes, etc. also plays a role. The emission factors on which the figure is based are founded on certain methodological choices and estimates as described in appendix B. Sources: PostNord approach to sustainability: https://www.postnord.com/sustainability PostNord sustainability reports with data on distribution emissions: https://www.postnord.com/da/ investor-relations/regnskabsaflaggelse/arlige-rapporter-og-baredygtighedsrapporter

Appendix B Physical Letters CO2e emissions from paper production and distribution of all physical letters sent via PostNord in Denmark in the period 2013-2021.

Production of Paper It is important to note that the CO2e emissions related to paper production can vary significantly depending on the specific production processes and inputs used in the paper manufacturing. Factors to consider are the type of paper, the amount of reused paper fibres and the energy sources used etc.

The emission factor associated with the production of paper includes CO2e emitted from the forestry management, raw materials, purchased energy, wood transportation, paper mills etc.

43

Distribution of Letters The emission factors related to distributing letters in Denmark are based on publicly available data reported by PostNord. Data from 2014-2017 as well as 2021 is available and has therefore been interpolated to cover the remaining years of the model.

Source: https://www.postnord.com/da/investor-relations/regnskabsaflaggelse/arlige-rapporter-ogbaredygtighedsrapporter

Digital Letters CO2e emissions associated with the total volume of digital letters sent in Denmark via e-Boks in the period 2013-2021.

The emission factor of a digital letter depends on many different factors, e.g., the length of the message, the formatting, the addition of an illustrated signature, the weight of the attachments, the time it takes to write and read, the internet connection etc. The calculations of this model have therefore been developed based on several assumptions, such as the average size of all digital letters being 1 MB, and that all digital letters are written and read on a computer with Wi-Fi. Carbon emissions associated with digital letters are broken down into 3 categories: Depreciation of the manufacture of the computers used to write and read the message, the energy consumption of the computer during the writing and reading of the email, and the transport of data over the network. Note that emissions associated with the storage of digital letters are excluded as e-Boks’ supplier of data hosting runs on renewable energy.

Two different emission factors have been applied, one from 2014 and one developed in 2021, for the calculation of carbon emissions related to sending digital letters through e-Boks’ platform in Denmark in the period 2013-2021.The first emission factor is based on data from the publicly available database, La Base Carbone, which refers to a report from 2014. The database is managed by the French Agency for Environmental Change (ADEME). The second emission factor is based on a French life cycle assessment (LCA) study from 2021 conducted on emails by a team of experts in measuring the carbon footprint of digital technologies.

Both emission factors cover the LCA of digital letters based on respectively 2014 and 2021 data. The two emission factors have been interpolated to cover the entire 2013-2021 period.

Source: https://www.sami.eco/blog/empreinte-carbone-email

44

Hans Bekkevolds Allé 7

DK-2900 Hellerup

Telephone +45 70 21 24 00

VAT number DK-25 67 41 54

www.e-boks.com